Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
File: RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer (raw, json)
Hash identifier: sYkPNmgT88uxV3WA6hLNey9WsWLzIumI5Vi1lgeXIIU=
Subject key identifier: 44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019469953C2D5FA4C5225AB967751ED7312B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 15 Jan 2025 10:49:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47825
IP: 185.222.62.0/24
IP: 2a13:a140::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:95:3c:2d:5f:a4:c5:22:5a:b9:67:75:1e:d7:31:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 15 10:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4410d28a9274f9df1065b7f62f8b8997739c047d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6b:33:7e:fb:fb:94:be:f7:89:9d:35:61:35:
1c:7c:b4:d3:c2:88:42:80:f2:d7:7e:e6:30:36:81:
e8:de:4a:bd:2d:d6:24:1d:47:3f:41:ae:e7:2b:bc:
46:c2:61:3c:b3:7b:40:dd:a8:7d:e0:06:1f:64:b7:
b7:18:80:d8:e3:35:b4:51:29:63:e1:d2:6e:60:a6:
fa:84:35:5b:cd:c0:7d:49:40:67:00:bc:49:02:1f:
47:63:96:96:38:e0:49:15:53:8b:e2:cc:30:b5:bd:
0d:39:79:8f:c9:39:da:9e:f1:0a:76:b9:71:3a:e5:
c6:5b:43:a2:22:a0:af:3b:e3:f0:71:bf:04:81:a1:
ba:61:ac:d9:8e:75:9f:4c:3a:21:84:df:f4:81:d1:
3a:90:da:d4:03:20:9a:e5:f6:e7:57:3d:32:ea:e1:
a4:44:5e:a9:47:bf:d9:45:88:fa:6d:cf:0d:b2:fb:
d0:9f:32:e1:6a:a2:05:48:e2:8f:de:e1:ad:4a:77:
42:99:6e:20:36:a8:30:02:04:2e:e3:02:96:d3:f7:
08:4c:f5:9d:e7:74:cd:e4:d9:9f:f6:da:49:ed:00:
43:5a:aa:36:78:c5:1f:9d:53:dc:6d:ac:eb:44:0c:
f5:78:89:e3:aa:67:82:bf:b2:67:2f:0a:43:ce:00:
78:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.62.0/24
IPv6:
2a13:a140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47825
Signature Algorithm: sha256WithRSAEncryption
1b:d7:3e:82:ae:58:b6:9a:13:ac:42:da:24:5e:2d:d0:2b:c3:
de:e0:28:52:4d:8c:d0:6e:8a:b4:67:8f:bc:50:c3:f9:74:40:
88:92:00:c6:20:df:03:fc:35:89:16:a5:42:c2:46:c6:5e:81:
df:59:8d:04:32:75:15:5b:bb:0c:45:89:50:d3:cc:53:8c:d8:
e8:f0:a2:16:27:01:19:5a:dc:07:50:d3:1b:22:61:ac:e7:87:
bb:be:1b:a0:61:5d:08:da:0d:bc:06:92:44:d4:af:d7:bf:52:
3c:90:4d:65:51:71:a8:af:e4:b0:74:4a:56:d3:71:4c:60:3b:
d4:7d:d3:cd:39:4b:45:03:bb:5e:1d:4f:6f:37:00:27:10:31:
c6:ee:02:ec:0f:aa:1e:45:05:2a:0c:81:9a:e1:ae:0c:d2:75:
94:b3:2d:37:e0:6b:0f:18:b4:34:a6:b7:3e:6a:71:dd:a1:df:
b9:c2:e8:49:c5:7f:c9:28:4e:31:de:a9:a3:c6:ec:97:d2:7a:
25:68:19:16:f2:e4:16:c1:64:59:f2:ac:75:7b:82:22:6d:42:
c9:38:4d:36:68:6d:13:e4:05:89:81:38:4b:ab:3f:c1:e8:60:
21:f3:48:a8:5a:f3:49:b3:7f:93:33:3f:05:a0:6d:91:bf:48:
2f:34:7c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:35 2025 by rpki-client